CVE-2024-7591 is an Improper Input Validation vulnerability in Progress LoadMaster, affecting versions 7.2.40.0 and above, ECS (all versions), and Multi-Tenancy 7.1.35.4 and above, allowing for OS Command Injection. This critical vulnerability carries a CVSS score of 7.2 (HIGH), indicating a network-exploitable flaw with high impact on confidentiality, integrity, and availability, requiring high privileges for exploitation. While not yet in CISA's KEV catalog, it has a high EPSS score, suggesting a significant likelihood of exploitation, and has garnered substantial community discussion and media coverage, with public Nuclei templates available for detection.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 7.2.40.0, <= 7.2.60.0CPE matchmatch criteria | cpe:2.3:a:kemptechnologies:loadmaster:*:*:*:*:*:*:*:* | ||
>= 7.1.35.4, < 7.1.35.11CPE matchmatch criteria | cpe:2.3:o:kemptechnologies:multi-tenant_hypervisor_firmware:*:*:*:*:*:*:*:* | ||
>= 7.2.40.0, < 7.2.60.1CPE match | cpe:2.3:a:progress:loadmaster:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.3 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.